Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
File:                     1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft (raw, json)
Hash identifier:          qEXyQ8EW/mn8Ryz0TVWinCAvYNX98ZJt2FpvPEYR/rI=
Subject key identifier:   05:20:E7:4F:8F:83:FE:30:28:7C:58:24:2F:A6:67:ED:32:5C:1D:15
Authority key identifier: D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99
Certificate issuer:       /CN=A911EA9E/serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
Manifest number:          0156
Signing time:             Tue 01 Jul 2025 04:33:22 +0000
Manifest this update:     Tue 01 Jul 2025 04:33:22 +0000
Manifest next update:     Tue 08 Jul 2025 04:33:22 +0000
Files and hashes:         1: 1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl (hash: Ul+lhV8Gu0MLgO/ZKtCP5/m4EV5SDLp9ex1eqhzHKcY=)
                          2: C7C28CAC4A0711EEBE153131C4F9AE02.roa (hash: fULv4mZtsqynbOZKV5hkIaFsTcwy4lbv2N6/j51k2ns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl
                          rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Jul 2025 04:33:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911EA9E, serialNumber=D6757FC32409DBC2F22B62C319B9E44DB9EA0799
        Validity
            Not Before: Jul  1 04:33:22 2025 GMT
            Not After : Jul  8 04:33:22 2025 GMT
        Subject: CN=68636512-698f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:2a:b5:50:dd:64:e4:fb:87:ba:af:b1:e7:
                    8c:83:a5:aa:0a:f9:63:3c:fe:3b:00:4b:dd:4c:91:
                    67:49:7f:37:d2:e5:6d:76:5e:f3:eb:f2:01:22:fc:
                    91:71:10:4e:c7:40:88:b1:c4:96:8c:c9:32:8f:8b:
                    4c:09:11:15:de:09:8f:20:97:bc:c3:6f:ee:7d:11:
                    32:bc:9f:ab:c4:9b:a0:f4:ed:ea:90:33:ef:2f:6f:
                    43:20:85:cf:b9:22:cc:92:51:3d:99:21:99:5c:d8:
                    44:7c:2e:3e:90:90:42:a9:9c:bb:3e:47:8e:c0:23:
                    5e:5f:f0:7c:7e:7e:8d:d4:b6:84:f0:fe:42:83:1a:
                    a4:3f:7e:49:7d:06:70:dc:7f:a9:a7:2b:e4:fa:38:
                    44:e0:24:23:ad:6d:5d:66:dd:6e:ef:a7:70:20:bc:
                    0a:ec:9b:02:ae:b7:b5:f1:34:7c:8c:ae:48:82:ad:
                    8a:bc:07:a4:c5:b4:95:0e:77:10:7a:21:f3:a7:a1:
                    67:56:96:f8:06:fa:71:df:a3:ef:22:05:54:08:91:
                    b0:e4:ad:3c:f8:96:11:08:ad:57:b5:36:dc:4a:9a:
                    cf:5e:18:0f:e0:04:ac:39:58:b0:27:3f:3e:e9:19:
                    9c:bb:a5:cf:60:ab:a3:24:0b:f5:e2:5d:dc:76:88:
                    48:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:20:E7:4F:8F:83:FE:30:28:7C:58:24:2F:A6:67:ED:32:5C:1D:15
            X509v3 Authority Key Identifier:
                keyid:D6:75:7F:C3:24:09:DB:C2:F2:2B:62:C3:19:B9:E4:4D:B9:EA:07:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1nV_wyQJ28LyK2LDGbnkTbnqB5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EA9E/66E0C6384A0711EEA1BF5030C4F9AE02/1nV_wyQJ28LyK2LDGbnkTbnqB5k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:3b:4f:f5:3b:61:e2:09:dc:1c:70:be:1b:b0:f5:f3:01:81:
         9c:c8:40:d5:3b:8c:61:8e:28:b8:68:19:3a:ae:cc:6d:11:bd:
         e6:5a:61:35:75:dc:b0:d6:27:b0:6c:10:de:9b:5b:d4:a8:6b:
         2e:e6:2d:4f:ce:db:e9:a5:00:a8:5e:9f:ff:b2:90:05:2e:4c:
         e0:6c:68:a6:63:c0:6c:e8:69:30:0e:5a:e3:c1:db:54:5d:26:
         a0:a5:56:e5:21:f6:96:f3:27:1f:2c:f3:2e:0a:2f:2a:f1:fe:
         26:65:d7:e7:23:09:ca:16:cd:c3:3e:71:65:1b:7c:93:88:e1:
         f0:55:43:34:77:cc:ea:9d:08:b6:22:37:82:01:d8:3a:42:da:
         48:5c:c7:d6:11:f4:b6:72:3f:62:05:34:64:04:4f:3a:bd:9b:
         3d:d7:9d:d7:38:e1:5c:a0:68:2f:9f:08:cb:f8:a3:4d:f8:73:
         f6:aa:fa:fe:a4:0c:30:ee:aa:de:01:bf:c9:11:1e:dc:b9:a3:
         d1:02:d1:82:3f:24:06:30:6a:7b:bd:e3:35:77:00:16:52:c5:
         7a:5d:8f:10:cb:f1:c2:fc:64:bf:f5:72:c6:94:42:6f:a1:c3:
         c9:17:b8:23:a1:01:cc:0e:95:95:45:ca:53:91:ef:5d:93:93:
         72:49:98:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:34:47 2025 by rpki-client